Read Bios events log through windows ?

Question

Hello, I'm trying to send the 'Alert! Cover was previously removed.' message, which i find in the Bios System Logs > Bios Events section, to my SIEM.I'd just need to access this alert message through the windows 7 and then i'll manage to work things out.Is there any way to do this ? The computer is an optiplex 3020. Thanks

DELL-Jesse L · Answer

derppderpp,

Click the link below for information resetting the "Alert" error on your OptiPlex.

How to reset or remove an "Alert! Cover was previously removed" message that appears when starting a Dell OptiPlex computer

speedstep · Answer

You need to use a special utility to do that. Specifically installing the Dell OMCI Open Manage Client Instrumentation.

http://www.dell.com/downloads/global/solutions/omci_info.pdf

http://en.community.dell.com/techcenter/systems-management/w/wiki/1774.omci-sample-scripts

From there you can use WMI to read the BIOS settings such as:

To see Dell Boot Order:

Get-Wmiobject -NameSpace root/dellOMCI -Class Dell_BootDeviceSequence

Dell Also has some useful examples of Powershell code to use after installing OMCI at Dell OMCI PowerShell Examples

http://www.dell.com/downloads/global/power/ps2q04-014.pdf

Power Shell Examples

PowerShell Command	Description
gwmi -namespace root\dellomci -list	Queries the local system for all classes in the root\dellomci namespace
gwmi -namespace root\dellomci -list -computer COMPUTER1	Queries COMPUTER1 for all classes in the root\dellomci namespace
gwmi -namespace root\dellomci dell_chassis	Displays all properties and values of the Dell_Chassis class
(gwmi -namespace root\dellomci dell_SMBIOSSEttings).ChassisIntrusionStatus	Display Chassis Intrusion Status for the local system

derppderpp · Answer

I don't need to reset the alert, I need to send it to my server.

Optiplex Desktops

Read Bios events log through windows ?

Was this post helpful?